{"id":"CVE-2026-44471","summary":"gitoxide: Symlink prefix-reuse allows worktree escape during checkout","details":"gitoxide is an implementation of git written in Rust. Prior to 0.21.1, a malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-controlled symlink into any existing directory the user has write access to. During checkout, all symlink index entries are deferred and created after regular files using a single shared gix_worktree::Stack. Internally, this uses a gix_fs::Stack. gix_fs::Stack::make_relative_path_current() caches validated path prefixes: when the previously-processed leaf component exactly matches the leading component(s) of the next path, the leaf-to-directory transition at gix-fs/src/stack.rs invokes only delegate.push_directory(), never delegate.push(). In gix_worktree::stack::delegate::StackDelegate, when the state member is State::CreateDirectoryAndAttributesStack, Attributes::push_directory() only loads attributes (from the ODB, in the clone case), and does not perform any other checks. The on-disk symlink_metadata() check and unlink-on-collision live in StackDelegate::push()'s invocation of create_leading_directory(), which is therefore bypassed for the cached prefix. The final symlink is created with plain std::os::unix::fs::symlink, which follows symlinks in parent directories. Therefore, it's possible to provide a tree with duplicate symlink and directory entries that exploits this. This vulnerability is fixed in 0.21.1.","aliases":["GHSA-f89h-2fjh-2r9q"],"modified":"2026-08-12T03:51:08.625762811Z","published":"2026-05-13T21:36:44.007Z","related":["CGA-x8j3-73vv-fhjr"],"database_specific":{"cwe_ids":["CWE-59"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44471.json","cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44471.json"},{"type":"ADVISORY","url":"https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-f89h-2fjh-2r9q"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44471"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gitoxidelabs/gitoxide","events":[{"introduced":"0"},{"fixed":"69c6a36ba14cbef129deebda9fd8870005fefa17"}],"database_specific":{"cpe":"cpe:2.3:a:gitoxidelabs:gix-fs:*:*:*:*:*:rust:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.21.1"}],"source":["AFFECTED_FIELD","CPE_RANGE"]}}],"versions":["gix-path-v0.8.3","gix-features-v0.31.1","gix-worktree-v0.21.0","gix-utils-v0.1.4","gix-traverse-v0.29.0","gix-trace-v0.1.2","gix-revwalk-v0.3.0","gix-revision-v0.17.0","gix-refspec-v0.13.0","gix-ref-v0.32.0","gix-protocol-v0.35.0","gix-pack-v0.39.0","gix-odb-v0.49.0","gix-object-v0.32.0","gix-negotiate-v0.4.0","gix-mailmap-v0.15.0","gix-index-v0.20.0","gix-hashtable-v0.2.3","gix-discover-v0.21.0","gix-diff-v0.32.0","gix-date-v0.7.0","gix-config-v0.25.0","gix-commitgraph-v0.17.1","gix-actor-v0.23.0","v0.27.0","gix-worktree-v0.20.0","gix-validate-v0.7.6","gix-v0.47.0","gix-utils-v0.1.3","gix-url-v0.20.0","gix-traverse-v0.28.0","gix-transport-v0.33.0","gix-trace-v0.1.1","gix-tempfile-v7.0.0","gix-sec-v0.8.2","gix-revwalk-v0.2.0","gix-revision-v0.16.0","gix-refspec-v0.12.0","gix-ref-v0.31.0","gix-quote-v0.4.5","gix-protocol-v0.34.0","gix-prompt-v0.5.2","gix-path-v0.8.2","gix-packetline-v0.16.3","gix-pack-v0.38.0","gix-odb-v0.48.0","gix-object-v0.31.0","gix-negotiate-v0.3.0","gix-mailmap-v0.14.0","gix-lock-v7.0.0","gix-index-v0.19.0","gix-ignore-v0.4.0","gix-hashtable-v0.2.2","gix-hash-v0.11.3","gix-glob-v0.9.0","gix-fs-v0.3.0","gix-features-v0.31.0","gix-discover-v0.20.0","gix-diff-v0.31.0","gix-date-v0.6.0","gix-credentials-v0.16.0","gix-config-value-v0.12.2","gix-config-v0.24.0","gix-commitgraph-v0.17.0","gix-command-v0.2.6","gix-chunk-v0.4.3","gix-bitmap-v0.2.5","gix-attributes-v0.14.0","gix-actor-v0.22.0","gitoxide-core-v0.29.0","gix-worktree-v0.19.0","gix-v0.46.0","gix-traverse-v0.27.0","gix-revwalk-v0.1.0","gix-revision-v0.15.2","gix-protocol-v0.33.2","gix-pack-v0.37.0","gix-odb-v0.47.0","gix-negotiate-v0.2.1","gix-index-v0.18.0","gix-diff-v0.30.1","gix-attributes-v0.13.1","gix-protocol-v0.33.1","TEST-0.0.0","v0.26.0","gitoxide-core-v0.28.0","gix-v0.45.1","gix-revision-v0.15.1","gix-worktree-v0.18.0","gix-validate-v0.7.5","gix-v0.45.0","gix-utils-v0.1.2","gix-url-v0.19.0","gix-traverse-v0.26.0","gix-transport-v0.32.0","gix-tempfile-v6.0.0","gix-sec-v0.8.1","gix-revision-v0.15.0","gix-refspec-v0.11.0","gix-ref-v0.30.0","gix-quote-v0.4.4","gix-protocol-v0.33.0","gix-prompt-v0.5.1","gix-path-v0.8.1","gix-packetline-v0.16.2","gix-pack-v0.36.0","gix-odb-v0.46.0","gix-object-v0.30.0","gix-negotiate-v0.2.0","gix-mailmap-v0.13.0","gix-lock-v6.0.0","gix-index-v0.17.0","gix-ignore-v0.3.0","gix-hashtable-v0.2.1","gix-hash-v0.11.2","gix-glob-v0.8.0","gix-fs-v0.2.0","gix-features-v0.30.0","gix-discover-v0.19.0","gix-diff-v0.30.0","gix-date-v0.5.1","gix-credentials-v0.15.0","gix-config-value-v0.12.1","gix-config-v0.23.0","gix-commitgraph-v0.16.0","gix-command-v0.2.5","gix-chunk-v0.4.2","gix-bitmap-v0.2.4","gix-attributes-v0.13.0","gix-actor-v0.21.0","gix-packetline-v0.16.1","gix-object-v0.29.2","gix-worktree-v0.17.1","gix-testtools-v0.12.0","gix-discover-v0.18.1","gix-index-v0.16.1","gix-ref-v0.29.1","v0.25.0","gitoxide-core-v0.27.0","cargo-smart-release-v0.19.0","gix-worktree-v0.17.0","gix-v0.44.1","gix-url-v0.18.0","gix-transport-v0.31.0","gix-sec-v0.8.0","gix-refspec-v0.10.1","gix-ref-v0.29.0","gix-protocol-v0.32.0","gix-prompt-v0.5.0","gix-path-v0.8.0","gix-pack-v0.35.0","gix-odb-v0.45.0","gix-ignore-v0.2.0","gix-glob-v0.7.0","gix-discover-v0.18.0","gix-credentials-v0.14.0","gix-config-value-v0.12.0","gix-config-v0.22.0","gix-attributes-v0.12.0","cargo-smart-release-v0.18.0","v0.24.0","gix-commitgraph-v0.14.0","gitoxide-core-v0.26.0","gix-worktree-v0.16.0","gix-v0.44.0","gix-transport-v0.30.0","gix-revision-v0.13.0","gix-refspec-v0.10.0","gix-protocol-v0.31.0","gix-packetline-v0.16.0","gix-pack-v0.34.0","gix-odb-v0.44.0","gix-mailmap-v0.12.0","gix-index-v0.16.0","gix-utils-v0.1.1","gix-url-v0.17.0","gix-traverse-v0.25.0","gix-tempfile-v5.0.3","gix-sec-v0.7.0","gix-ref-v0.28.0","gix-prompt-v0.4.0","gix-path-v0.7.4","gix-object-v0.29.1","gix-lock-v5.0.1","gix-ignore-v0.1.0","gix-hashtable-v0.2.0","gix-hash-v0.11.1","gix-glob-v0.6.0","gix-fs-v0.1.1","gix-discover-v0.17.0","gix-diff-v0.29.0","gix-credentials-v0.13.0","gix-config-value-v0.11.0","gix-config-v0.21.0","gix-bitmap-v0.2.3","gix-attributes-v0.11.0","gix-fs-v0.1.0","gix-utils-v0.1.0","gix-object-v0.29.0","gix-hash-v0.11.0","gix-features-v0.29.0","gix-date-v0.5.0","gix-archive-v0.1.0","gix-actor-v0.20.0","gix-hashtable-v0.1.3","gix-hash-v0.10.4","gix-revision-v0.12.2","gix-worktree-v0.15.2","gix-v0.43.1","gix-protocol-v0.30.2","gix-path-v0.7.3","gix-packetline-v0.15.1","gix-odb-v0.43.1","gix-index-v0.15.1","gix-discover-v0.16.2","gix-config-value-v0.10.2","gix-config-v0.20.1","gix-ref-v0.27.2","gix-worktree-v0.15.1","gix-validate-v0.7.4","gix-v0.43.0","gix-transport-v0.29.1","gix-tempfile-v5.0.2","gix-revision-v0.12.1","gix-protocol-v0.30.1","gix-prompt-v0.3.3","gix-pack-v0.33.2","gix-discover-v0.16.1","gix-diff-v0.28.1","gix-config-v0.20.0","gix-archive-v0.0.0","gix-v0.42.0","gix-transport-v0.29.0","gix-tempfile-v5.0.1","gix-ref-v0.27.1","gix-protocol-v0.30.0","gix-packetline-v0.15.0","gix-pack-v0.33.1","gix-features-v0.28.1","gix-v0.40.0","gix-tempfile-v4.1.1","gix-worktree-v0.14.0","gix-v0.39.0","gix-url-v0.15.0","gix-transport-v0.27.0","gix-revision-v0.12.0","gix-refspec-v0.9.0","gix-ref-v0.26.0","gix-protocol-v0.28.0","gix-odb-v0.42.0","gix-mailmap-v0.11.0","gix-index-v0.14.0","gix-discover-v0.15.0","gix-credentials-v0.11.0","gix-config-v0.18.0","gix-attributes-v0.10.0","gix-traverse-v0.24.0","gix-pack-v0.32.0","gix-object-v0.28.0","gix-features-v0.28.0","gix-diff-v0.28.0","gix-actor-v0.19.0","gix-worktree-v0.13.0","gix-v0.38.0","gix-url-v0.14.0","gix-traverse-v0.23.0","gix-transport-v0.26.0","gix-tempfile-v4.1.0","gix-revision-v0.11.0","gix-refspec-v0.8.0","gix-ref-v0.25.0","gix-protocol-v0.27.0","gix-pack-v0.31.0","gix-odb-v0.41.0","gix-mailmap-v0.10.0","gix-lock-v4.0.0","gix-index-v0.13.0","gix-hashtable-v0.1.2","gix-discover-v0.14.0","gix-diff-v0.27.0","gix-credentials-v0.10.0","gix-config-v0.17.0","gix-bitmap-v0.2.2","gix-quote-v0.4.3","gix-object-v0.27.0","gix-features-v0.27.0","gix-attributes-v0.9.0","gix-actor-v0.18.0","gix-tempfile-v4.0.0","v0.23.0","gix-v0.37.2","gix-object-v0.26.4","gix-diff-v0.26.3","gix-commitgraph-v0.13.1","gitoxide-core-v0.25.0","cargo-smart-release-v0.17.0","gix-v0.37.1","gix-config-v0.16.3","gix-v0.37.0","gix-traverse-v0.22.2","gix-object-v0.26.3","gix-diff-v0.26.2","gix-testtools-v0.11.0","gix-v0.36.1","gix-worktree-v0.12.3","gix-validate-v0.7.3","gix-url-v0.13.3","gix-transport-v0.25.6","gix-revision-v0.10.4","gix-refspec-v0.7.3","gix-ref-v0.24.1","gix-quote-v0.4.2","gix-protocol-v0.26.4","gix-path-v0.7.2","gix-packetline-v0.14.3","gix-pack-v0.30.3","gix-object-v0.26.2","gix-mailmap-v0.9.3","gix-index-v0.12.4","gix-hash-v0.10.3","gix-glob-v0.5.5","gix-features-v0.26.5","gix-discover-v0.13.1","gix-date-v0.4.3","gix-credentials-v0.9.2","gix-config-v0.16.2","gix-command-v0.2.4","gix-attributes-v0.8.3","gix-actor-v0.17.2","gix-glob-v0.5.4","gix-transport-v0.25.5","v0.22.1","cargo-smart-release-v0.16.1","v0.22.0","gix-commitgraph-v0.13.0","gitoxide-core-v0.24.0","cargo-smart-release-v0.16.0","gix-worktree-v0.12.2","gix-v0.36.0","gix-transport-v0.25.4","gix-revision-v0.10.3","gix-refspec-v0.7.2","gix-protocol-v0.26.3","gix-packetline-v0.14.2","gix-pack-v0.30.2","gix-odb-v0.40.2","gix-mailmap-v0.9.2","gix-index-v0.12.3","gix-chunk-v0.4.1","gix-traverse-v0.22.1","gix-hashtable-v0.1.1","gix-discover-v0.13.0","gix-diff-v0.26.1","gix-credentials-v0.9.1","gix-bitmap-v0.2.1","gix-url-v0.13.2","gix-prompt-v0.3.2","gix-config-v0.16.1","gix-command-v0.2.3","gix-validate-v0.7.2","gix-tempfile-v3.0.2","gix-sec-v0.6.2","gix-ref-v0.24.0","gix-object-v0.26.1","gix-lock-v3.0.2","gix-config-value-v0.10.1","gix-attributes-v0.8.2","gix-quote-v0.4.1","gix-path-v0.7.1","gix-glob-v0.5.3","gix-features-v0.26.4","gix-actor-v0.17.1","gix-hash-v0.10.2","gix-date-v0.4.2","git-worktree-v0.12.3","git-tui-v0.1.0","git-validate-v0.7.3","git-url-v0.13.3","git-traverse-v0.22.2","git-transport-v0.25.5","git-tix-v0.1.0","git-tempfile-v3.0.3","git-submodule-v0.1.0","git-sequencer-v0.1.0","git-sec-v0.6.3","git-revision-v0.10.4","git-refspec-v0.7.3","git-ref-v0.24.1","git-rebase-v0.1.0","git-quote-v0.4.2","git-protocol-v0.26.4","git-prompt-v0.3.3","git-pathspec-v0.1.0","git-path-v0.7.2","git-packetline-v0.14.3","git-pack-v0.31.0","git-odb-v0.41.0","git-object-v0.26.2","git-note-v0.1.0","git-mailmap-v0.9.3","git-lock-v3.0.3","git-lfs-v0.1.0","git-index-v0.12.4","git-hashtable-v0.1.2","git-hash-v0.10.3","git-glob-v0.5.4","git-filter-v0.1.0","git-fetchhead-v0.1.0","git-features-v0.26.5","git-discover-v0.13.1","git-diff-v0.26.2","git-date-v0.4.3","git-credentials-v0.9.2","git-config-value-v0.10.2","git-config-v0.16.2","git-commitgraph-v0.13.1","git-command-v0.2.4","git-chunk-v0.4.2","git-bitmap-v0.2.2","git-attributes-v0.8.3","git-actor-v0.17.2","git-features-v0.26.4","git-features-v0.26.3","gix-v0.35.0","git-revision-v0.10.3","git-config-v0.16.1","gix-v0.0.0","v0.21.0","gitoxide-core-v0.23.0","git-commitgraph-v0.13.0","cargo-smart-release-v0.15.0","git-repository-v0.34.0","git-worktree-v0.12.2","git-refspec-v0.7.2","git-validate-v0.7.2","git-url-v0.13.2","git-traverse-v0.22.1","git-transport-v0.25.4","git-tempfile-v3.0.2","git-sec-v0.6.2","git-revision-v0.10.2","git-ref-v0.24.0","git-quote-v0.4.1","git-protocol-v0.26.3","git-prompt-v0.3.2","git-path-v0.7.1","git-packetline-v0.14.2","git-pack-v0.30.2","git-odb-v0.40.2","git-object-v0.26.1","git-mailmap-v0.9.2","git-lock-v3.0.2","git-index-v0.12.3","git-hashtable-v0.1.1","git-hash-v0.10.2","git-glob-v0.5.3","git-features-v0.26.2","git-discover-v0.13.0","git-diff-v0.26.1","git-date-v0.4.2","git-credentials-v0.9.1","git-config-value-v0.10.1","git-config-v0.16.0","git-command-v0.2.3","git-chunk-v0.4.1","git-bitmap-v0.2.1","git-attributes-v0.8.2","git-actor-v0.17.1","git-worktree-v0.12.1","git-url-v0.13.1","git-transport-v0.25.3","git-tempfile-v3.0.1","git-sec-v0.6.1","git-revision-v0.10.1","git-repository-v0.33.0","git-refspec-v0.7.1","git-ref-v0.23.1","git-protocol-v0.26.2","git-prompt-v0.3.1","git-pack-v0.30.1","git-odb-v0.40.1","git-mailmap-v0.9.1","git-index-v0.12.2","git-glob-v0.5.2","git-features-v0.26.1","git-discover-v0.12.1","git-date-v0.4.1","git-config-v0.15.1","git-attributes-v0.8.1","git-worktree-v0.12.0","git-transport-v0.25.2","git-revision-v0.10.0","git-repository-v0.32.0","git-refspec-v0.7.0","git-ref-v0.23.0","git-protocol-v0.26.1","git-pack-v0.30.0","git-odb-v0.40.0","git-mailmap-v0.9.0","git-discover-v0.12.0","git-diff-v0.26.0","git-config-v0.15.0","git-command-v0.2.2","git-index-v0.12.1","git-traverse-v0.22.0","git-object-v0.26.0","git-index-v0.12.0","git-date-v0.4.0","git-actor-v0.17.0","git-transport-v0.25.1","git-worktree-v0.11.0","git-url-v0.13.0","git-traverse-v0.21.0","git-transport-v0.25.0","git-revision-v0.9.0","git-repository-v0.31.0","git-refspec-v0.6.0","git-ref-v0.22.0","git-protocol-v0.26.0","git-pack-v0.29.0","git-odb-v0.39.0","git-object-v0.25.0","git-mailmap-v0.8.0","git-index-v0.11.0","git-features-v0.26.0","git-discover-v0.11.0","git-diff-v0.25.0","git-credentials-v0.9.0","git-config-v0.14.0","git-command-v0.2.1","git-attributes-v0.8.0","git-actor-v0.16.0","git-repository-v0.30.2","git-url-v0.12.2","git-transport-v0.24.2","git-odb-v0.38.1","git-features-v0.25.1","v0.20.0","gitoxide-core-v0.22.0","git-url-v0.12.1","git-transport-v0.24.1","git-repository-v0.30.1","git-protocol-v0.25.1","git-commitgraph-v0.12.0","git-worktree-v0.10.0","git-validate-v0.7.1","git-url-v0.12.0","git-traverse-v0.20.0","git-transport-v0.24.0","git-sec-v0.6.0","git-revision-v0.8.0","git-repository-v0.30.0","git-refspec-v0.5.0","git-ref-v0.21.0","git-protocol-v0.25.0","git-prompt-v0.3.0","git-path-v0.7.0","git-packetline-v0.14.1","git-pack-v0.28.0","git-odb-v0.38.0","git-object-v0.24.0","git-mailmap-v0.7.0","git-lock-v3.0.1","git-index-v0.10.0","git-glob-v0.5.1","git-features-v0.25.0","git-discover-v0.10.0","git-diff-v0.24.0","git-date-v0.3.1","git-credentials-v0.8.0","git-config-value-v0.10.0","git-config-v0.13.0","git-attributes-v0.7.0","git-actor-v0.15.0","git-hashtable-v0.1.0","git-hash-v0.10.1","v0.19.0","gitoxide-core-v0.21.0","git-worktree-v0.9.0","git-validate-v0.7.0","git-url-v0.11.0","git-traverse-v0.19.0","git-transport-v0.23.0","git-tempfile-v3.0.0","git-sec-v0.5.0","git-revision-v0.7.0","git-repository-v0.29.0","git-refspec-v0.4.0","git-ref-v0.20.0","git-quote-v0.4.0","git-protocol-v0.24.0","git-prompt-v0.2.0","git-path-v0.6.0","git-packetline-v0.14.0","git-pack-v0.27.0","git-odb-v0.37.0","git-object-v0.23.0","git-mailmap-v0.6.0","git-lock-v3.0.0","git-index-v0.9.0","git-hash-v0.10.0","git-glob-v0.5.0","git-features-v0.24.0","git-discover-v0.9.0","git-diff-v0.23.0","git-date-v0.3.0","git-credentials-v0.7.0","git-config-value-v0.9.0","git-config-v0.12.0","git-commitgraph-v0.11.0","git-command-v0.2.0","git-chunk-v0.4.0","git-bitmap-v0.2.0","git-attributes-v0.6.0","git-actor-v0.14.0","v0.18.0","gitoxide-core-v0.20.0","git-worktree-v0.8.0","git-transport-v0.22.0","git-repository-v0.28.0","git-ref-v0.19.0","git-protocol-v0.23.0","git-lock-v2.2.0","git-index-v0.8.0","git-glob-v0.4.2","git-discover-v0.8.0","git-config-value-v0.8.2","git-config-v0.11.0","git-transport-v0.21.2","git-repository-v0.27.0","git-pack-v0.26.0","git-odb-v0.36.0","git-index-v0.7.1","git-diff-v0.22.0","cargo-smart-release-v0.14.0","v0.17.0","gitoxide-core-v0.19.0","git-worktree-v0.7.0","git-url-v0.10.1","git-transport-v0.21.1","git-tempfile-v2.0.6","git-sec-v0.4.2","git-repository-v0.26.0","git-refspec-v0.3.1","git-ref-v0.18.0","git-protocol-v0.22.0","git-prompt-v0.1.1","git-pack-v0.25.0","git-odb-v0.35.0","git-object-v0.22.1","git-index-v0.7.0","git-glob-v0.4.1","git-features-v0.23.1","git-discover-v0.7.0","git-diff-v0.21.0","git-credentials-v0.6.1","git-config-value-v0.8.1","git-config-v0.10.0","git-commitgraph-v0.10.0","cargo-smart-release-v0.13.0","git-worktree-v0.6.0","git-url-v0.10.0","git-traverse-v0.18.0","git-transport-v0.21.0","git-sec-v0.4.1","git-revision-v0.6.0","git-repository-v0.25.0","git-refspec-v0.3.0","git-ref-v0.17.0","git-protocol-v0.21.0","git-packetline-v0.13.1","git-pack-v0.24.0","git-odb-v0.34.0","git-object-v0.22.0","git-mailmap-v0.5.0","git-index-v0.6.0","git-hash-v0.9.11","git-features-v0.23.0","git-discover-v0.6.0","git-diff-v0.20.0","git-credentials-v0.6.0","git-config-v0.9.0","git-attributes-v0.5.0","git-actor-v0.13.0","git-url-v0.8.0","git-features-v0.22.4","git-traverse-v0.16.4","git-repository-v0.23.1","git-discover-v0.4.2","git-diff-v0.18.1","git-hash-v0.9.7","git-features-v0.22.1","cargo-smart-release-v0.12.1","cargo-smart-release-v0.12.0","git-url-v0.7.3","git-traverse-v0.16.3","git-transport-v0.19.3","git-repository-v0.23.0","git-refspec-v0.1.1","git-ref-v0.15.4","git-protocol-v0.19.1","git-pack-v0.22.0","git-odb-v0.32.0","git-object-v0.20.3","git-diff-v0.18.0","git-config-v0.7.1","git-worktree-v0.4.3","git-testtools-v0.8.0","git-ref-v0.15.3","git-index-v0.4.3","git-attributes-v0.3.3","git-revision-v0.4.4","git-features-v0.22.3","git-worktree-v0.4.2","git-repository-v0.22.0","git-validate-v0.5.5","git-url-v0.7.2","git-traverse-v0.16.2","git-transport-v0.19.2","git-tempfile-v2.0.4","git-sec-v0.3.1","git-revision-v0.4.2","git-refspec-v0.1.0","git-ref-v0.15.2","git-quote-v0.2.1","git-protocol-v0.19.0","git-packetline-v0.12.7","git-pack-v0.21.2","git-odb-v0.31.2","git-object-v0.20.2","git-mailmap-v0.3.2","git-lock-v2.1.1","git-index-v0.4.2","git-hash-v0.9.8","git-glob-v0.3.2","git-features-v0.22.2","git-discover-v0.4.1","git-diff-v0.17.2","git-date-v0.0.5","git-credentials-v0.4.0","git-config-v0.7.0","git-chunk-v0.3.1","git-bitmap-v0.1.2","git-attributes-v0.3.2","git-actor-v0.11.3","git-path-v0.4.1","git-revision-v0.4.1","git-repository-v0.21.1","git-date-v0.0.4","git-actor-v0.11.2","v0.14.0","gitoxide-core-v0.16.0","git-commitgraph-v0.8.1","git-worktree-v0.4.1","git-repository-v0.21.0","git-url-v0.7.1","git-traverse-v0.16.1","git-transport-v0.19.1","git-tempfile-v2.0.3","git-revision-v0.4.0","git-ref-v0.15.1","git-protocol-v0.18.1","git-packetline-v0.12.6","git-pack-v0.21.1","git-odb-v0.31.1","git-object-v0.20.1","git-mailmap-v0.3.1","git-index-v0.4.1","git-discover-v0.4.0","git-diff-v0.17.1","git-date-v0.0.3","git-config-v0.6.1","git-bitmap-v0.1.1","git-attributes-v0.3.1","git-actor-v0.11.1","v0.13.0","gitoxide-core-v0.15.0","git-worktree-v0.4.0","git-repository-v0.20.0","git-commitgraph-v0.8.0","git-url-v0.7.0","git-traverse-v0.16.0","git-transport-v0.19.0","git-revision-v0.3.0","git-protocol-v0.18.0","git-pack-v0.21.0","git-odb-v0.31.0","git-mailmap-v0.3.0","git-index-v0.4.0","git-discover-v0.3.0","git-diff-v0.17.0","git-credentials-v0.3.0","git-config-v0.6.0","git-tempfile-v2.0.2","git-sec-v0.3.0","git-ref-v0.15.0","git-path-v0.4.0","git-object-v0.20.0","git-hash-v0.9.6","git-glob-v0.3.1","git-features-v0.22.0","git-date-v0.0.2","git-attributes-v0.3.0","git-actor-v0.11.0","git-sec-v0.1.2","git-discover-v0.1.3","cargo-smart-release-v0.10.2","git-repository-v0.18.1","git-path-v0.1.3","git-discover-v0.1.2","cargo-smart-release-v0.10.1","git-sec-v0.1.1","git-repository-v0.18.0","git-path-v0.1.2","git-pack-v0.19.1","git-discover-v0.1.1","git-config-v0.4.0","cargo-smart-release-v0.10.0","git-worktree-v0.2.0","git-repository-v0.17.0","git-url-v0.5.0","git-traverse-v0.15.0","git-transport-v0.17.0","git-revision-v0.2.0","git-ref-v0.13.0","git-protocol-v0.16.0","git-packetline-v0.12.5","git-pack-v0.19.0","git-odb-v0.29.0","git-mailmap-v0.2.0","git-index-v0.3.0","git-discover-v0.1.0","git-validate-v0.5.4","git-sec-v0.1.0","git-path-v0.1.1","git-object-v0.19.0","git-lock-v2.1.0","git-hash-v0.9.4","git-glob-v0.3.0","git-features-v0.21.0","git-diff-v0.16.0","git-credentials-v0.1.0","git-config-v0.3.0","git-attributes-v0.1.0","git-actor-v0.10.0","v0.12.0","gitoxide-core-v0.14.0","git-revision-v0.1.0","git-repository-v0.16.0","git-traverse-v0.14.0","git-ref-v0.12.1","git-pack-v0.18.0","git-odb-v0.28.0","git-diff-v0.15.0","git-config-v0.2.1","git-testtools-v0.6.0","v0.11.0","gitoxide-core-v0.13.0","git-commitgraph-v0.7.0","git-worktree-v0.1.0","git-url-v0.4.0","git-traverse-v0.13.0","git-transport-v0.16.0","git-tempfile-v2.0.1","git-repository-v0.15.0","git-ref-v0.12.0","git-quote-v0.2.0","git-protocol-v0.15.0","git-packetline-v0.12.4","git-pack-v0.17.0","git-odb-v0.27.0","git-mailmap-v0.1.0","git-lock-v2.0.0","git-index-v0.2.0","git-diff-v0.14.0","git-bitmap-v0.1.0","cargo-smart-release-v0.9.0","git-object-v0.18.0","git-actor-v0.9.0","git-config-v0.2.0","git-features-v0.20.0","git-hash-v0.9.3","git-note-v0.0.0","git-mailmap-v0.0.0","git-quote-v0.1.0","git-pathspec-v0.0.0","git-attributes-v0.0.0","git-tempfile-v2.0.0","git-tempfile-v1.0.6","git-actor-v0.8.1","git-revision-v0.0.0","git-pack-v0.16.1","git-object-v0.17.1","git-hash-v0.9.2","git-tempfile-v1.0.5","git-config-v0.1.11","cargo-smart-release-v0.8.0","git-repository-v0.14.0","git-ref-v0.11.0","git-protocol-v0.14.0","git-url-v0.3.5","git-transport-v0.15.0","git-packetline-v0.12.3","git-odb-v0.26.0","git-traverse-v0.12.0","git-tempfile-v1.0.4","git-pack-v0.16.0","git-diff-v0.13.0","git-chunk-v0.3.0","git-object-v0.17.0","git-config-v0.1.10","git-actor-v0.8.0","git-features-v0.19.1","git-hash-v0.9.1","git-index-v0.1.0","git-hash-v0.9.0","git-features-v0.19.0","git-bitmap-v0.0.1","git-bitmap-v0.0.0","git-worktree-v0.0.0","git-chunk-v0.2.0","git-chunk-v0.1.0","git-traverse-v0.11.0","git-transport-v0.14.0","git-repository-v0.13.0","git-ref-v0.10.0","git-protocol-v0.13.0","git-packetline-v0.12.2","git-pack-v0.15.0","git-odb-v0.25.0","git-object-v0.16.0","git-diff-v0.12.0","git-config-v0.1.9","git-actor-v0.7.0","cargo-smart-release-v0.7.0","git-features-v0.18.0","git-repository-v0.12.0","cargo-smart-release-v0.6.0","git-traverse-v0.10.1","git-transport-v0.13.1","git-ref-v0.9.1","git-protocol-v0.12.1","git-packetline-v0.12.1","git-pack-v0.14.0","git-odb-v0.24.0","git-object-v0.15.1","git-diff-v0.11.1","git-config-v0.1.8","cargo-smart-release-v0.5.6","cargo-smart-release-v0.5.5","cargo-smart-release-v0.5.4","cargo-smart-release-v0.5.3","v0.10.0","cargo-smart-release-v0.5.2","cargo-smart-release-v0.5.1","cargo-smart-release-v0.5.0","gitoxide-core-v0.12.0","git-traverse-v0.10.0","git-transport-v0.13.0","git-repository-v0.11.0","git-ref-v0.9.0","git-protocol-v0.12.0","git-packetline-v0.12.0","git-pack-v0.13.0","git-odb-v0.23.0","git-object-v0.15.0","git-hash-v0.8.0","git-features-v0.17.0","git-diff-v0.11.0","git-commitgraph-v0.6.0","git-actor-v0.6.0","v0.9.0","gitoxide-core-v0.11.0","git-commitgraph-v0.5.0","git-validate-v0.5.3","git-url-v0.3.4","git-traverse-v0.9.0","git-transport-v0.12.0","git-tempfile-v1.0.3","git-repository-v0.10.0","git-ref-v0.8.0","git-protocol-v0.11.0","git-packetline-v0.11.0","git-pack-v0.12.0","git-odb-v0.22.0","git-object-v0.14.1","git-lock-v1.0.1","git-hash-v0.7.0","git-features-v0.16.5","git-diff-v0.10.0","git-config-v0.1.7","git-actor-v0.5.3","cargo-smart-release-v0.4.0","git-repository-v0.9.1","git-ref-v0.7.3","git-tempfile-v1.0.2","v0.8.4","gitoxide-core-v0.10.5","git-ref-v0.7.2","git-protocol-v0.10.4","git-odb-v0.21.3","git-tempfile-v1.0.1","git-repository-v0.9.0","git-ref-v0.7.1","git-odb-v0.21.2","git-pack-v0.11.0","git-traverse-v0.8.2","git-diff-v0.9.2","git-object-v0.14.0","git-actor-v0.5.2","cargo-smart-release-v0.3.1","v0.8.3","gitoxide-core-v0.10.4","git-commitgraph-v0.4.4","git-repository-v0.8.2","git-ref-v0.7.0","git-protocol-v0.10.3","git-packetline-v0.10.1","git-odb-v0.21.1","git-pack-v0.10.0","git-traverse-v0.8.1","git-diff-v0.9.1","git-object-v0.13.1","git-config-v0.1.6","git-actor-v0.5.1","git-features-v0.16.4","git-hash-v0.6.0","gitoxide-core-v0.10.3","git-protocol-v0.10.2","git-transport-v0.11.1","git-config-v0.1.5","git-commitgraph-v0.4.3","git-repository-v0.8.1","cargo-smart-release-v0.3.0","git-repository-v0.8.0","git-protocol-v0.10.1","git-ref-v0.6.0","git-protocol-v0.10.0","git-transport-v0.11.0","git-packetline-v0.10.0","git-odb-v0.21.0","git-pack-v0.9.0","git-traverse-v0.8.0","git-features-v0.16.3","git-diff-v0.9.0","git-object-v0.13.0","git-actor-v0.5.0","git-actor-v0.4.0","git-lock-v1.0.0","git-tempfile-v1.0.0","git-testtools-v0.5.0","v0.8.2","gitoxide-core-v0.10.2","git-config-v0.1.4","git-commitgraph-v0.4.2","git-repository-v0.7.2","git-ref-v0.5.4","git-lock-v0.3.2","git-protocol-v0.9.0","git-transport-v0.10.1","git-url-v0.3.3","git-packetline-v0.9.1","git-odb-v0.20.2","git-pack-v0.8.2","git-traverse-v0.7.2","git-tempfile-v0.6.1","git-diff-v0.8.2","git-object-v0.12.2","git-validate-v0.5.2","git-actor-v0.3.3","git-features-v0.16.2","git-hash-v0.5.1","cargo-smart-release-v0.2.4","cargo-smart-release-v0.2.3","cargo-smart-release-v0.2.2","git-ref-v0.5.3","v0.8.1","gitoxide-v0.8.1","gitoxide-v0.8.0","gitoxide-core-v0.10.1","git-config-v0.1.3","git-commitgraph-v0.4.1","cargo-smart-release-v0.2.1","cargo-smart-release-v0.2.0","cargo-smart-release-v0.1.0","git-repository-v0.7.1","git-ref-v0.5.2","git-protocol-v0.8.1","git-odb-v0.20.1","git-pack-v0.8.1","git-traverse-v0.7.1","git-diff-v0.8.1","git-object-v0.12.1","git-validate-v0.5.1","git-actor-v0.3.2","git-transport-v0.10.0","git-packetline-v0.9.0","git-traverse-v0.7.0","git-object-v0.12.0","git-pack-v0.8.0","git-odb-v0.20.0","git-diff-v0.8.0","git-actor-v0.3.1","git-lock-v0.3.1","git-lock-v0.3.0","git-packetline-v0.8.0","git-odb-v0.18.0","git-pack-v0.6.0","git-diff-v0.6.0","git-traverse-v0.5.0","git-packetline-v0.7.0","git-odb-v0.17.0","git-pack-v0.5.0","git-tempfile-v0.6.0","git-diff-v0.5.0","git-traverse-v0.4.0","git-object-v0.11.0","git-validate-v0.5.0","git-actor-v0.3.0","git-testtools-v0.4.0","git-odb-v0.16.1","gitoxide-core-v0.10.0","git-repository-v0.7.0","git-transport-v0.9.0","git-protocol-v0.8.0","git-packetline-v0.6.0","git-pack-v0.3.1","git-features-v0.16.1","git-diff-v0.4.1","git-traverse-v0.3.1","git-ref-v0.5.1","git-pack-v0.3.0","git-odb-v0.16.0","git-traverse-v0.3.0","git-ref-v0.5.0","git-object-v0.10.0","git-diff-v0.4.0","git-hash-v0.5.0","git-validate-v0.4.0","git-url-v0.3.2","git-features-v0.16.0","git-lock-v0.2.0","git-tempfile-v0.5.0","git-actor-v0.2.0","git-config-v0.1.2","git-actor-v0.1.1","git-actor-v0.1.0","git-lock-v0.1.0","git-tempfile-v0.4.0","git-tempfile-v0.3.0","git-tempfile-v0.2.0","git-lock-v0.0.0","git-tempfile-v0.1.0","git-testtools-v0.3.0","git-repository-v0.6.0","git-validate-v0.1.0","git-pack-v0.2.0","git-pack-v0.1.0","v0.7.0","git-config-v0.1.1","gitoxide-core-v0.9.0","git-protocol-v0.7.0","git-transport-v0.8.0","git-packetline-v0.5.0","git-odb-v0.15.0","git-diff-v0.3.0","git-traverse-v0.2.0","git-object-v0.9.0","git-features-v0.14.0","git-odb-v0.14.0","git-diff-v0.2.0","git-traverse-v0.1.0","git-traverse-v0.0.0","git-diff-v0.1.0","git-testtools-v0.1.0","git-odb-v0.12.0","git-object-v0.8.0","git-hash-v0.3.0","git-features-v0.13.0","git-diff-v0.0.0","gitoxide-core-v0.8.0","git-repository-v0.5.0","git-protocol-v0.6.0","git-transport-v0.7.0","git-odb-v0.10.0","git-object-v0.7.0","git-commitgraph-v0.4.0","git-features-v0.12.0","git-hash-v0.2.0","git-odb-v0.9.1","git-odb-v0.9.0","git-protocol-v0.5.0","git-transport-v0.6.0","git-url-v0.3.0","git-config-v0.1.0","git-commitgraph-v0.3.2","git-odb-v0.8.0","git-odb-v0.7.1","git-features-v0.11.0","git-features-v0.10.1","git-url-v0.2.0","git-hash-v0.1.2","git-commitgraph-v0.3.1","git-protocol-v0.4.1","git-transport-v0.5.1","end-2020","git-packetline-v0.4.1","git-ref-v0.4.1","git-url-v0.1.1","v0.6.0","gitoxide-core-v0.7.0","git-transport-v0.5.0","git-protocol-v0.4.0","git-odb-v0.7.0","git-object-v0.6.0","git-hash-v0.1.1","git-commitgraph-v0.3.0","git-features-v0.10.0","git-hash-v0.1.0","v0.5.0","gitoxide-core-v0.6.0","git-protocol-v0.3.0","git-transport-v0.4.0","git-packetline-v0.4.0","git-odb-v0.6.0","git-commitgraph-v0.2.0","git-features-v0.9.0","git-object-v0.5.0","git-protocol-v0.2.0","git-transport-v0.3.0","git-packetline-v0.3.0","git-odb-v0.5.0","git-features-v0.8.0","git-odb-v0.4.2","git-features-v0.7.0","git-config-v0.0.0","git-commitgraph-v0.1.2","git-commitgraph-v0.1.1","git-commitgraph-v0.1.0","v0.4.0","gitoxide-core-v0.4.0","git-repository-v0.4.0","git-protocol-v0.1.0","git-odb-v0.4.0","git-object-v0.4.0","git-url-v0.1.0","git-transport-v0.2.0","git-packetline-v0.2.0","git-ref-v0.4.0","git-features-v0.5.0","git-index-v0.0.0","git-commitgraph-v0.0.0","git-packetline-v0.1.0","git-features-v0.4.0","git-url-v0.0.0","git-protocol-v0.0.0","v0.3.0","gitoxide-core-v0.3.0","git-repository-v0.3.0","git-ref-v0.3.0","git-odb-v0.3.0","git-object-v0.3.0","git-features-v0.3.0","git-tui-v0.0.0","git-ref-v0.2.0","git-features-v0.2.0","git-ref-v0.1.0","v0.1.0","gitoxide-core-v0.1.0","git-transport-v0.0.0","git-repository-v0.1.0","git-odb-v0.1.0","git-object-v0.1.0","git-features-v0.1.0","the-beginning-2020"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44471.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}